← Back

CVE-2022-2483

nvd nist
Published: Jan 6, 2023Modified: Jun 17, 2026

JSON object

Loading...
7.1
Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H
Exploitability: 1.8 / Impact: 5.2
Source: NVD

Description

The bootloader in the Nokia ASIK AirScale system module (versions 474021A.101 and 474021A.102) loads public keys for firmware verification signature. If an attacker modifies the flash contents to corrupt the keys, secure boot could be permanently disabled on a given device.

Affected (2)

Nokia
2 products
Asik Airscale 474021a.102 Firmware
Asik Airscale 474021a.101 Firmware
Configuration A
1 vulnerable · 1 platform
Vulnerable SoftwareAffected Versions
Asik Airscale 474021a.102 Firmware
All versions
Running on/withPlatform Versions
Nokia
Asik Airscale 474021a.102
All versions
Configuration B
1 vulnerable · 1 platform
Vulnerable SoftwareAffected Versions
Asik Airscale 474021a.101 Firmware
All versions
Running on/withPlatform Versions
Nokia
Asik Airscale 474021a.101
All versions

Related CWEs

CWE-1282
Assumed-Immutable Data is Stored in Writable Memory
Immutable data, such as a first-stage bootloader, device identifiers, and "write-once" configuration settings are stored in writable memory that can be re-programmed or updated in the field.

References (2)

Source: ics-cert@hq.dhs.gov
Third Party AdvisoryUS Government Resource
Source: af854a3a-2127-422b-91ae-364da2661108
Third Party AdvisoryUS Government Resource

Timeline

No history available yet.